Re: Standards for developing secure software

From: Ben Pfaff (blpat_private)
Date: Sat Jan 25 2003 - 10:21:51 PST

  • Next message: Pavel Kankovsky: "Re: Standards for developing secure software"

    Valdis.Kletnieksat_private writes:
    
    > What if the string length is negative? (and yes, I've seen a C strlen()
    > return a negative value, when another thread trashed the stack and corrupted
    > the return value).
    
    The return type of strlen() is size_t, which the C standard
    defines as an unsigned integer type, so it is curious to imagine
    how strlen() could return a negative value.
    



    This archive was generated by hypermail 2b30 : Sat Jan 25 2003 - 15:12:05 PST